[Snort-users] No alerts

stephanie sokhn sokhnstephanie at ...125...
Thu Apr 3 12:07:31 EDT 2014


Hello,
Im using snort for the first time on ubuntu 12.04 and I have a problem with the inline mode.
I have a one nic laptop .
Using:
Iptables -I INPUT -j NFQUEUE --queue-num 1
And the daq nfq:
Snort -Q --daq nfq  --daq-var device=eth0 --daq-var queue=1 -c snort.conf

Error: can't initialize DAQ nfq (-1) nfq_daq_initialize: nf queue creation failed.

Note that when I dnt configure the iptables snort is launched but fail to alert or drop packets or even log  . 

Help!! :/
Stephany


More information about the Snort-users mailing list